Out  of  harm’s  way 


Security  planning  can  save  your  business 


^  rortraitofa 
P  Avoiding  ca 
^  Unintemipti 
i  Special  Secti 


You  thought  there  were  no  new  choices  in 
Security  Software 

Then... 

You  need  to  know  about  ALERT™  from 
Goal  Systems  International 

*/  Easy  to  Install 

*/  Easy  to  Administer 

*/  Well  Supported 

*/  Available  for  MVS,  VM  and  VSE 


To  Find  Quality  Call  800-848-4640. 
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SECURITY 


in  focus 


IT  CAN  T  HAPPEIN  HElREMostafiistaketliTeatstooiiTh(Hnes,livesandlovedonesseri- 

ousty,  so  do  we  treat  the  safety  of  our  computer  systems  with  any  le^  caution?  Many  bctors  are 

woikbg  to  make  our  systems  less  secure  —  the  increase  in  connectivity,  the  rising  sop^tication  of 
users  a^  management’s  unwillingness  to  take  the  problem  to  heart.  Blase  attitudes  can  harm  the 
best  intent  to  put  a  security  ;dan  in  idace.  The  author  takes  a  look  at  the  state  of  mind  in  the  security 
industry  today.  By  Fatrida  Keefe.  P<^e  12. 

BEYOND  THE  BLUE  Disaster  recovery  services  armi’t  just  for  IBM  anymore.  While  the  large 

providers  continue  to  concentrate  on  IBM  equipn^  and  sites,  smaller  compani^  are  targeting 
their  offerings  to  the  likes  (rf  Data  General  arid  Unisys.  Certain  firms,  such  as  Digital  and  I^bng,  have 
even  taken  matters  into  their  own  hands  and  set  up  recovery  services  for  their  customers.  Read 
about  the  non-IBM  recovmy  services  market  and  the  organizations  that  are  looking  out  for  No.  2 
and  3  and  4 . . .  By  Stan  Kidodziej.  Fosge  19. 


PDitrait  of  a  fortress 

By  Micbael  Tucker.  Take  a  journey 
through  a  secure  storage  facility 
with  the  MIS  manager  of  mythical 
XYZ  Corp.  and  find  oat  about  the  in¬ 
ner  workings  of  a  data  and  equip¬ 
ment  storage  stronedmld.  Firge  17. 

Catching  disasters 

By  Kenneth  Brin.  This  site  iqitime 
consultam  says  the  conditioitt  that 


and  s^ely  ebn^ted  before  cata- 


learning  to  read  the  warning  signs 

your  conmony  can  be  a  rafe  haven 
fordauT^^a 

IheinsandoiitsofllPS 

By  Stan  KolodzMj.  The  m 


ismovmgoutotitstraditioaalbas- 
tion  in  iiidustiy  and  the  militaty  and 
into  the  DP  arena.  Products  are  be¬ 
ing  revamped,  making  the  technol¬ 
ogy  increasingly  attractive  to  MIS. 
Discover  what’s  new.  PageZS. 

Your  srsteas’ vital  signs 

By  Stan  Koloda^  MIS  is  tunmg  to 
perfoniu^nMmtacstobelppip- 
point  critical  weaknesses  in  cnting 
machioes.  Monitoring  can  catch  cuK 
prits  chewing  up  resources  through 
task  activities  or  running  a  program 
in  a  loop;  it  keeps  close  watch  on 
CPU  and  device  use  and  so  00.  Best 
of  aU,  these  tools  can  help  MIS 
squeeze  better  performance  out  of 

its  systems.  Page  ^1- 


„  ^  ,  a  let  you 

read  about  the  experiences 
those  who  survived  mis¬ 
fortune?  Senior  Water  Hel¬ 
en  Pike  interviews  MIS 
professionals  who  spe^ 
candidly  about  vdiat  their 
companies  went  through 
and  the  importance  of  hav¬ 
ing  a  plan  Of  action  in  place. 
Plus:  A  security  expert  ana¬ 
lyzes  bow  mwA  security  is 
enough.  Starts  on  page  27. 

Illllllllllllll 


Fitni  the  Editor 

Including  your  letters  to  us.  Pqgr  4 

News4Aiial)rm 

Mainframe  security  remains  profit¬ 
able;  NBS  pushes  for  more  security 
standards;  U.S.  rethinks  stance  on 
Toshiba;  Unix  goes  secure;  NYSE 
systems  after  &  crash.  Atge  & 

Manager’s  Conor 

Jim  Young  on  MIS  job  security. 
Page  10. 

m 

Two  MIT  professors  discuss  then- 
data  security  projects.  Page  10. 


Bine  Beat 

Brian  Jeffery  on 
IBM.iVwea& 


Tech  Talk  on  a  garage-tumed-stor- 


oyption  dennce;  the  “televaulting" 
concept;  knr-tecfa  security  options 
for  protKtiog  PCs. 


Industry  events.  Page  39. 

Hie  Insider 

Michael  MiDadn  on  rdyingon  bay, 
sloppy  users  for  security.  Pag*  4a 

Logoff 

U.S.  figures  verify  the  high  cost  of 
disasters.  Avr  40. 
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Renat  MIS  gndu^  discoveis 
a  citdi-22  in  new  job  prospects 


Win  a  business  or  tedinical 
slant  better  open  MIS  doors? 


paranoia 


rHi  ItemlrLastyear.agroupofWestGermancom- 
puter  hobbyists  successfully  entered  an  international 
computer  network  belonging  to  the  U.S.  National  Aero¬ 
nautics  and  Space  Administration.  They  were  “ethical” 
backers  and  didn’t  break  anything.  But  still,  they  had  the  run  of 
the  place  for  at  least  three  months. 

Item  2:  Early  this  year,  a  Califmmia-baaed  distributor  shipped  ai 


Item  3:  There  is  a  story,  widely  reported,  that  sometime  last 
December,  somebody  sent  a  holiday  greeting  into  the  internal 
communications  network  of  a  certain  large  computer  maker 
based  in  New  York  state.  (Three  guesses  which  one.)  The  kicker 
is  that  the  electronic  mail  contained  a  virus,  a  self-replicating 
program.  Within  a  matter  of  days,  it  had  spread  throu^  the  en¬ 
tire  network  and  brought  a  worldwide  communications  system 
to  its  knees. 

Now,  the  question:  Is  anybody  paying  attention? 

Each  of  these  cases  was  relatively  harmless.  Yet  each  should 
give  you  nightmares  as  an  MIS  professknaL  If  you  sleep  peace¬ 
fully,  then  you  are  either  one  of  those  rare  MIS  officers  who  has 
made  a  real  effort  to  defend  your  data,  or,  more  likely ,  you  do  not 
comprehend  the  peril  you  face.  And  it’s  easy  not  to  understand. 

making  data  availaUe,  not  locking  it  up. 

Yet,  increasingly,  the  value  of  information  is  a|nwr^nt 

to  thieves  and  vandals,  and  MIS  must  protect  it  But  that  effort 
willrequirethatMIScfficersjettiaaasomeoftheopemiess  — 
caD  it  innocence  —  that  has  marked  their  professiao  in  the  past 
Instead,  they  must  cultivate  something  of  the  paranoia  that 
rruist  be  a  port  of  the  business  strategist's  psyche.  That  idea  is 
grim,  but  the  attemative  is  worse.  If  MIS  officers  cannot  impose 
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thnedameadi  TotTaiioe.Cali(.-ti*ndAifaton-  nearyni.— 


y  Are  your:  c^Hal, 
pM-  marketing strat^& 
iSis  trade  secrets  safe? 

Tcdce  this  test! 


I — I  of  your  company  you  may  be 
financiaHy  liable  for  the  misuse 
of  your  company’s  data? 

□  What  wouM  happen  lo  the  stock 
price  of  your  company  if  someone 
bleached  your  sy^em.  and  the 
press  fouitd  out’ 

□  Howvwuldyouknowif  a  "hacker" 
had  been  trying  to  break  into  your 
system  during  the  last  six  months? 


□  Would  your  competition  place  a 
“mm"  in  your  system? 

□  How  would  you  know  if  someone 
breached  your  systeii^ 

□  Could  an  employee  with  previous 
access  gain  entry  one  day 


□  Does  even  one  of  your  envloyen 
post  the  password  on  their  monitor 
or  modem  so  a  visitor  could  see  it’ 


If  you  don't  Uke  the 
answers  you're  coming 
up  until,  give  us  a  caU.  1”” 
We've  got  a  good  one!  - 


OaiaComSKui^Coip. 
3948  Trust  Why 
Hayward,  CA  94S4S 
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It  can’t 
happen 
here... 

Blase  aMiiudes  spell  trouble 

BY  PATRICIA  KEEFE 

omputer  crime  is  a  lot  like  any  other  kmd  of  crime, 
particularly  when  it  comes  to  the  blase  attitudes 
prevalant  among  would-be  victims.  Everyrnte  as¬ 
sumes  it  can’t  happen  to  him,  vdiether  it  be  robbery,  rape  or 
unauthorized  access  to  sensitive  data. 

Yet  even  the  most  optimistic  among  us  takes  certain  pre¬ 
cautions.  We  (km’t  wander  the  streets  alone  at  night  We  don’t 
flash  wads  bills  in  front  (tf  strangers,  and  we  routinely  lock 
our  doors  and  windows.  Sure,  it  requires  a  little  effort,  but 
common  sense,  abetted  by  a  daily  dose  d  screaming  head¬ 
lines,  assures  us  the  expenditure  is  worth  it 

But  to  bear  security  consultants  tell  it,  the  fearless  business 
world  could  use  a  good  dose  of  that  same  commcm  sense. 

Implementation  of  ccanputer  security  programs  is  hi^ily  in- 
ddent-diiven,  says  Carl  Jackson,  a  cmnputer  security  qredal- 
ist  with  Fad  Aero^ce  Corp.  in  Newport  Beach,  CaHf.,  and 
past  president  of  the  InformaticMi  Systems  Security  Associa¬ 
tion  (ISSA).  This  means  the  Fortune  1,000  appears  unwiHing 
to  give  much  thought  to  security  unless,  for  instance,  a  mqjra: 
security  breach  involving  a  conqretitor  receives  significant 
media  play. 

"Our  best  clients  are  the  ones  that  were  just  ripped  off,’’ 
adds  Dcmn  Raker,  a  cranputer  security  consultant  with  SRI 
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SECURITY 


Catching  disasters 
before  they  happen 

BYKENNETH  BRILL 

OI  nee  burned,  twice  shy  is  an  adage  that  many  disaster  survi- 
f  vors  take  to  heart  But  are  policies  put  in  place  only  after  a 
disaster  occurs  the  most  prudent  way  to  run  a  business?  Ask 
the  MIS  professional  who  just  lost  his  data  to  fire  or  flood  or  other 
cataclysm  whether  the  recovery  plan  he  put  in  place  this  week  will 
hring  back  lost  information  and  dollars.  It  may  be  too  late  for  him,  but 
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Forthosewhowanttokeep 
the  juice  flmoing,  hereare 


The  ins 
and  outs 

BY  STAN  ROLODZIEJ 

Times  are  changing  for  uninterruptible  power  supidies  (UBS),  those  unheralded  systems  that 
keep  annputers  running  \^hen  the  power  goes  off . 

Take  the  market  for  UPSs,  for  instance.  Not  so  kmg  ago,  UPSs  were  confined  primarily  to  the 
sh(9  floor  of  America’s  industrial  heartland  and  the  military,  where  unomamented,  ruggedized  UPS 


syst^s  blended  in  with  process  control  equipment  and  military  ordnance.  The  emphasis  was  on 
work,  not  style. 


of  UPS 
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CHI/CORrs  TMal  Raoowty  Planning  Syatem  (TRPS)  is  a 
isMional  dalabaaa  tool  on  a  peraonai  coniputer  that; 

•  MMasiteaayloentsryoijrdata 

•  Otganizas  and  manages  that  data  more  effectively  than 

•  Ptovidas  you  wHh  an  atready-documented,  detailed 
action  plw 

•  MahasRaasy  to  maintain  your  Disaster  Recovery  Plan 


CHI/COR  Information  Management,  Inc. 

10  S  Rivatside  Plaza,  Chicago.  11. 60606  •  312/454-9670 
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NEED  TO  WRITE 


D . : A  STER 
RECOVERY  PLAN  ?? 


TiCAL  GUIDE 


;OVERV  PLANNING 


DISA  ST 


How  much  is  enough?  Expert  says 
security  efforts  should  pay,  not  cost 


Checking 
your  systems' 
vital  signs 

Monitors  pinpoint  critical  weaknesses 


ine-tuning  is  the  name  of  the  game  with  large  comiHiter  sys¬ 
tems.  In  these  days  of  fiscal  responsflnlity,  corporations  are 
looking  to  their  information  systems  departments  to  toe  the  line 
and  squeeze  better  performance  fi-om  existing  machines.  To  help  them 
do  this,  MIS  prctfessionals  are  turning  to  the  growing  market  of  per¬ 
formance  monitors,  software  tools  that  delve  into  systems  and  pin- 
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where  vv^  all  eKis.re  arvj 

Ot^t.  OOp^  0^ 

While  sharing  success  is  admirable,  12  issues  of 

sharing  COMPUTERWORLD  is  not.  COMPUTERWORLD  FOCUS  free. 

Because  when  a  magazine  is  meant  to  be  pored  over  Order  your  own  subscription  to  COMPUTER- 
and  referred  to,  it’s  meant  to  be  kept  close  at  hand.  WORLD  today.  You’ll  get  51  information-packed 
issues.  Plus  12  bonus  issues  of  COMPUTER- 

The  solution?  WORLD  FOCUS  —  absolutely  FREE.  So  in  addition 

Your  own  subscription.  to  getting  the  weekly  news  of  the  computer  commu- 

You  can  have  a  personal  subscription  to  nity,  you’ll  get  an  in-depth  exploration  of  its  most 

COMPUTERWORLD.  All  yours.  Every  week.  timely  topics.  Topics  that  include  communications, 

It  will  give  you  a  complete  rundown  of  everything  data  security,  networking,  PCs  and  more, 
that’s  happening  in  the  computing  arena  —  a  macro  Plus  you’ll  get  our  special  Spotlight  section, 
package  at  a  micro  price.  You’ll  stay  on  top  of  the  Featuring  detailed  head-to-head  comparisons  of  the 
news  and  nuances  of  the  industry.  And  the  praises  industry’s  latest  products, 
and  problems  of  its  products.  So  call  now.  (Or  use  the  order  form  bound  into 

In  fact,  with  COMPUTERWORLD  in  your  hand,  this  issue.)  And  get  your  own  subscription.  Because 

you’ll  have  the  best  possible  grip  on  your  field.  the  people  who  share  success  aren’t  the  ones 

sharing  COMPUTERWORLD. 

1-800-255-6286 

(in  NJ  call  1-800-322-6286) 
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Locil-Am  and  PC  Nctwocka.  DaJbs.  Coatacb  InfonnatiaD  ^ 
April  11-12  —  Contact;  BunieK  Cam-  tute.  Suite  207,  511»-A  ] 
imnicatioos  Review.  950  Yorii  Road,  FalbChiircii.Va.22041. 
Hinsdale.  DL  60521. 

Supporting  End4Jaer 
Private  Netwnriu:  Tariffs  and  Da-  The  Coavngence  of  Oi 
aign  Techniguea.  Rhslungtoo.  O.C..  San  Francisco,  Apsi  ll-I 
A^  1 1-12  — CortacriConierenoe  Reg-  Tedmokigjr  IVaoafec  I 
iatrar.  Telecom  PuUisliing  Group.  P.O.  Tenth  St.  Santa  Monica.  C 


of  Digiial  Egu^ment  Cocp-'B  Prod-  TheAaaodationforlnfonnatianand  ' 
ucta.  Andover.  Mass..  April  11-13  —  Image  Manageaieat-1988  AIIM 
s.  Contact:  Infonnatian  Engineeiing  Insti-  Show.  Chicago.  April  11-14  — Contact: 
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AccofdingtoAISrBeU 
Laboratories  and  IBM 
research,  a  typical  com- 
pueer  site  oiperiences  as 


tufbances:  the  Uninterrup¬ 
tible  ftmer  System  (UPS) 
and  the  Rimer  Line  Condi¬ 
tioner  (PLC).  Each  eSec- 
dicly  eliminates  power 
fluctuations,  including 


brownouts,  and  mstortions. 
The  difiierence  being  that 
the  UPS  includes  a  built-in 
battery  reserw  for  ptorec- 
lion  against  blackouts.  The 
UPS  is  available  in  1,3,5 
and  X)  KW  power  ranges. 
ThePU:isavailablein3.5 
and  lOiCW  models. 

A  SO-year  advantage. 

TPhy  speciiy  ABB's  power 
prorection  equipment  over 
that  of  other  manuLacnir- 


puiers,  we  have  a  unique 
undersanding  of  what 
should  go  into  a  superior 
power  protection  ptodua 
For  instance,  our  parallel 
processing  architecture 
oflers  reliability  few  orhets 
can  provide.  It  also  maxi¬ 
mizes  cos-efficiency:  less 
power  is  needed  to  run  cur 


to  instail,  neisl  no  operator; 
and  require  no  schMuled 

Hirthetmore,  ABB  backs 
you  with  an  unequalled 
nationwide  service  network 
anda24-bourtoli-foee 
number  for  technical  ser- 

East  delivery. 

ABB  is  ready  to  ship  horn 
stodcOnoeourDallasfocil- 
ity  has  your  order  inhand, 
well  have  your  system 


si  800  372-2447  or  ma 
the  ccupon  below.  Let  us 
show  ym  how  to  turn 
expettsive  downtime  into 
productive  uptime. 


April  20-21  —  Ccrnsct:  Coine  Owens. 
Starxiaid  Federal.  1339  Main  Sl.  Colum¬ 
bia.  S.C.  29201. 


Speech  Tech ‘88.  New  York.  April  Xe- 
Zg-CootaceStanGaldstem.MedaDi- 
memima,  42  East  23id  SL,  New  York, 
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Business  Software 
That  Reflects  the  Way  You  Work 

jy  is  spent  juggling  one  thing  after  another.  Writing  reports.. .updating  budge 
w  the  new  financials...scheduling  meetings...a  memo  to  the  field...creating  a 
3n...checking  your  customer  list  and  much  more.  If  you're  juggling,  why 


business 


software  ths 


Contact 


UNIPLEX 


LABGE  SCREEN  DISPLAY 
SOLUTIONS 


Whenever  two  or  mote  people  get 
together  to  examine  computer  data/ 
graphics,  a  real-time,  large  screen 

pn^on  system  is  an  invaluable  tool.  of  optional  modules  -  extending  funcdon- 
Hectrohome  pioneered  the  concept  of  ality  and  hardware  updating, 
computer  projection  and,  today,  offers  the  PPP  r -nhirs 

most  complete  line  of  advanced  systems.  In  *  ™  urapiUCS 

the  fote&ont  are  the  new  ECP®  GRAPHICS  '^’‘5  new  single  lens  system  can  projea 
single  lens  and  ECP  3000  three  lens  systems.  in>ages  generated  by  high  resolution 
Both  feature  an  advanced  microprocessor  x  1280  pbcels,  non-interlaced)  CAD/ 


that  simplifies  operation,  and  widens  the 
capabilities  gap  between  Electrohome  and 
other  projection  systems. 

Computer  Intelligence 
mal^  the  difference 


the  projection  systems.  Infiated 
remote  control,  help  menus,  fre¬ 
quency  auto  lock,  diagnostics, 
digital  convergence  and  memory 
are  the  prime  benefits.  “Plug¬ 
in  module  architecture” 
allows  ftw  the  use  of  a  variety 


VARI-FOCUSforscteens5’tol4’ 
diagonal  (font,  tear  or  curved). 
The  ECP  3000 

This  new  3-lens  system  offers  a  bright,  crisp 
image  for  screen  sizes  fom  5’to  25’  diago¬ 
nal  (font,  rear  or  curved)  and  VARl-SCAN 
from  15-50  KHz.  Like  the  ECP  GRAPHICS  this 
unit  has  a  multi-function  infrared  remote 
control  that  includes  digital  convergence 
and  all  projector  functions. 

lai^e  Screen  Solutions 
for  every  application 
work  stations.  The  ECP  GRAPHICS  is  Sales  and  Service  in  40  Countries  Vforld- 
extremely  portable  and  has  wide.  For  more  information  on  Electrohome 
color  and  monochrome  projection  systems, 
send  your  business  card  to 
Elecfohome  Limited, 

PO.  Box  628,  BuM),  NY  142254)628. 
lntheU.S.A.calll-800-265-;2171. 

In  Canada  call  i-519-744-7m. 

!CF*  is  a  registered  trademark  of 
Electiohome  Limited. 

ScTMn  image  courtesy  or  SAS  Institutt  Inc. 


CAM  terminals,  as  well  as  video.  Because 
automatically  locks  on  scan  rates  firom  15-80 
KHz,  it’s  perfect  for  use  with  VCRs, 
PCs,  terminals  or  high  res  CAD/CAM 
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SEE  US  AT  COMDEX  BOOTH  #2232 


